EUVD-2014-8157

Malware in sbrugna...

CVE-2014-8315

CVE-2014-8315 affects polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882. The issue is a timing-based side-channel that allows remote attackers to perform port scanning via a host name and port provided in the cms parameter. Connected records confirm the product/version and the des...

SAP Security Note 1908531 - XXE in BusinessObjects Explorer

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: BusinessObjects Explorer Vendor: SAP AG Subject: Untrusted XML input parsing possible in SBOP Explorer Risk: High Effect: Remotely exploitable Author: Stefan Horlacher Date: 2014-10-10 SAP Security Note: 1908531 0...